Jenkins Security Advisories

Jenkins Security Advisory 2026-02-18

Wed, 18 Feb 2026 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2025-12-10

Wed, 10 Dec 2025 12:00:00 +0000

Affects Jenkins Core
Affects plugin: BlazeMeter
Affects plugin: Coverage
Affects plugin: Git client
Affects plugin: HashiCorp Vault
Affects plugin: Redpen - Pipeline Reporter for Jira

Jenkins Security Advisory 2025-10-29

Wed, 29 Oct 2025 12:00:00 +0000

Affects plugin: Azure CLI
Affects plugin: ByteGuard Build Actions
Affects plugin: Curseforge Publisher
Affects plugin: Eggplant Runner
Affects plugin: Extensible Choice Parameter
Affects plugin: JDepend
Affects plugin: MCP Server
Affects plugin: Nexus Task Runner
Affects plugin: OpenShift Pipeline
Affects plugin: Publish to Bitbucket
Affects plugin: SAML
Affects plugin: Start Windocks Containers
Affects plugin: Themis

Jenkins Security Advisory 2025-09-17

Wed, 17 Sep 2025 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2025-09-03

Wed, 3 Sep 2025 12:00:00 +0000

Affects plugin: Git client
Affects plugin: global-build-stats
Affects plugin: Jakarta Mail API
Affects plugin: OpenTelemetry

Jenkins Security Advisory 2025-07-09

Wed, 9 Jul 2025 12:00:00 +0000

Affects plugin: Apica Loadtest
Affects plugin: Applitools Eyes
Affects plugin: Aqua Security Scanner
Affects plugin: Credentials Binding
Affects plugin: Dead Man's Snitch
Affects plugin: Git Parameter
Affects plugin: HTML Publisher
Affects plugin: IBM Cloud DevOps
Affects plugin: IFTTT Build Notifier
Affects plugin: Kryptowire
Affects plugin: Nouvola DiveCloud
Affects plugin: QMetry Test Management
Affects plugin: ReadyAPI Functional Testing
Affects plugin: Sensedia Api Platform tools
Affects plugin: Statistics Gatherer
Affects plugin: Testsigma Test Plan run
Affects plugin: User1st uTester
Affects plugin: VAddy
Affects plugin: Warrior Framework
Affects plugin: Xooa

Jenkins Security Advisory 2025-06-06

Fri, 6 Jun 2025 12:00:00 +0000

Affects plugin: Gatling

Jenkins Security Advisory 2025-05-14

Wed, 14 May 2025 12:00:00 +0000

Affects plugin: Cadence vManager
Affects plugin: DingTalk
Affects plugin: Health Advisor by CloudBees
Affects plugin: OpenID Connect Provider
Affects plugin: WSO2 Oauth

Jenkins Security Advisory 2025-04-10

Thu, 10 Apr 2025 12:00:00 +0000

Affects jenkins/ssh-agent Docker images
Affects jenkins/ssh-slave Docker images

Jenkins Security Advisory 2025-04-02

Wed, 2 Apr 2025 12:00:00 +0000

Affects Jenkins Core
Affects plugin: AsakusaSatellite
Affects plugin: Cadence vManager
Affects plugin: monitor-remote-job
Affects plugin: Simple Queue
Affects plugin: Stack Hammer
Affects plugin: Templating Engine

Jenkins Security Advisory 2025-03-19

Wed, 19 Mar 2025 12:00:00 +0000

Affects plugin: AnchorChain
Affects plugin: EDDSA API
Affects plugin: Zoho QEngine

Jenkins Security Advisory 2025-03-05

Wed, 5 Mar 2025 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2025-01-22

Wed, 22 Jan 2025 12:00:00 +0000

Affects plugin: Azure Service Fabric
Affects plugin: Bitbucket Server Integration
Affects plugin: Eiffel Broadcaster
Affects plugin: Folder-based Authorization Strategy
Affects plugin: GitLab
Affects plugin: OpenId Connect Authentication
Affects plugin: Zoom

Jenkins Security Advisory 2024-11-27

Wed, 27 Nov 2024 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Filesystem List Parameter
Affects plugin: Simple Queue

Jenkins Security Advisory 2024-11-13

Wed, 13 Nov 2024 12:00:00 +0000

Affects plugin: Authorize Project
Affects plugin: IvyTrigger
Affects plugin: OpenId Connect Authentication
Affects plugin: Pipeline: Declarative
Affects plugin: Pipeline: Groovy
Affects plugin: Script Security
Affects plugin: Shared Library Version Override

Jenkins Security Advisory 2024-10-02

Wed, 2 Oct 2024 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Credentials
Affects plugin: OpenId Connect Authentication

Jenkins Security Advisory 2024-08-07

Wed, 7 Aug 2024 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2024-06-26

Wed, 26 Jun 2024 12:00:00 +0000

Affects plugin: Bitbucket Branch Source
Affects plugin: Plain Credentials
Affects plugin: Structs

Jenkins Security Advisory 2024-05-24

Fri, 24 May 2024 12:00:00 +0000

Affects plugin: OpenText Application Automation Tools
Affects plugin: Report Info
Affects plugin: Team Concert Git

Jenkins Security Advisory 2024-05-02

Thu, 2 May 2024 12:00:00 +0000

Affects plugin: Git server
Affects plugin: Script Security
Affects plugin: Subversion Partial Release Manager
Affects plugin: Telegram Bot

Jenkins Security Advisory 2024-04-17

Wed, 17 Apr 2024 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2024-03-20

Wed, 20 Mar 2024 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2024-03-06

Wed, 6 Mar 2024 12:00:00 +0000

Affects plugin: AppSpider
Affects plugin: Bitbucket Branch Source
Affects plugin: Build Monitor View
Affects plugin: Delphix
Affects plugin: docker-build-step
Affects plugin: GitBucket
Affects plugin: HTML Publisher
Affects plugin: iceScrum
Affects plugin: MQ Notifier
Affects plugin: OWASP Dependency-Check
Affects plugin: Subversion Partial Release Manager
Affects plugin: Trilead API

Jenkins Security Advisory 2024-01-24

Wed, 24 Jan 2024 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Git server
Affects plugin: GitLab Branch Source
Affects plugin: Log Command
Affects plugin: Matrix Project
Affects plugin: Qualys Policy Compliance Scanning Connector
Affects plugin: Red Hat Dependency Analytics

Jenkins Security Advisory 2023-12-13

Wed, 13 Dec 2023 12:00:00 +0000

Affects plugin: Analysis Model API
Affects plugin: Deployment Dashboard
Affects plugin: Dingding JSON Pusher
Affects plugin: HTMLResource
Affects plugin: Nexus Platform
Affects plugin: OpenId Connect Authentication
Affects plugin: PaaSLane Estimate
Affects plugin: Scriptler

Jenkins Security Advisory 2023-11-29

Wed, 29 Nov 2023 12:00:00 +0000

Affects plugin: Google Compute Engine
Affects plugin: Jira
Affects plugin: MATLAB
Affects plugin: NeuVector Vulnerability Scanner

Jenkins Security Advisory 2023-10-25

Wed, 25 Oct 2023 12:00:00 +0000

Affects plugin: CloudBees CD
Affects plugin: Edgewall Trac
Affects plugin: GitHub
Affects plugin: Gogs
Affects plugin: lambdatest-automation
Affects plugin: MSTeams Webhook Trigger
Affects plugin: Multibranch Scan Webhook Trigger
Affects plugin: Warnings
Affects plugin: Zanata

Jenkins Security Advisory 2023-10-18

Wed, 18 Oct 2023 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2023-09-20

Wed, 20 Sep 2023 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Build Failure Analyzer

Jenkins Security Advisory 2023-09-06

Wed, 6 Sep 2023 12:00:00 +0000

Affects plugin: Assembla Auth
Affects plugin: AWS CodeCommit Trigger
Affects plugin: Bitbucket Push and Pull Request
Affects plugin: Frugal Testing
Affects plugin: Google Login
Affects plugin: Ivy
Affects plugin: Job Configuration History
Affects plugin: Microsoft Entra ID (previously Azure AD)
Affects plugin: Pipeline Maven Integration
Affects plugin: Qualys Container Scanning Connector
Affects plugin: SSH2 Easy
Affects plugin: TAP

Jenkins Security Advisory 2023-08-16

Wed, 16 Aug 2023 12:00:00 +0000

Affects plugin: Blue Ocean
Affects plugin: Config File Provider
Affects plugin: Delphix
Affects plugin: Docker Swarm
Affects plugin: Favorite View
Affects plugin: Flaky Test Handler
Affects plugin: Folders
Affects plugin: Fortify
Affects plugin: Gogs
Affects plugin: Maven Artifact ChoiceListProvider (Nexus)
Affects plugin: NodeJS
Affects plugin: Shortcut Job
Affects plugin: Tuleap Authentication

Jenkins Security Advisory 2023-07-26

Wed, 26 Jul 2023 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Bazaar
Affects plugin: Chef Identity
Affects plugin: GitLab Authentication
Affects plugin: Gradle
Affects plugin: Qualys Web App Scanning Connector
Affects plugin: ServiceNow DevOps

Jenkins Security Advisory 2023-07-12

Wed, 12 Jul 2023 12:00:00 +0000

Affects plugin: Active Directory
Affects plugin: Assembla Auth
Affects plugin: Benchmark Evaluator
Affects plugin: Datadog
Affects plugin: ElasticBox CI
Affects plugin: External Monitor Job Type
Affects plugin: mabl
Affects plugin: MathWorks Polyspace
Affects plugin: OpenShift Login
Affects plugin: Oracle Cloud Infrastructure Compute
Affects plugin: Orka by MacStadium
Affects plugin: Pipeline restFul API
Affects plugin: Rebuilder
Affects plugin: SAML Single Sign On(SSO)
Affects plugin: Sumologic Publisher
Affects plugin: Test Results Aggregator

Jenkins Security Advisory 2023-06-14

Wed, 14 Jun 2023 12:00:00 +0000

Affects Jenkins Core
Affects plugin: AWS CodeCommit Trigger
Affects plugin: Checkmarx
Affects plugin: Digital.ai App Management Publisher
Affects plugin: Dimensions
Affects plugin: Maven Repository Server
Affects plugin: Sonargraph Integration
Affects plugin: Team Concert
Affects plugin: Template Workflows

Jenkins Security Advisory 2023-05-16

Tue, 16 May 2023 12:00:00 +0000

Affects plugin: Ansible
Affects plugin: AppSpider
Affects plugin: Azure VM Agents
Affects plugin: CAS
Affects plugin: Code Dx
Affects plugin: Email Extension
Affects plugin: File Parameter
Affects plugin: HashiCorp Vault
Affects plugin: LDAP
Affects plugin: LoadComplete support
Affects plugin: NS-ND Integration Performance Publisher
Affects plugin: Pipeline Utility Steps
Affects plugin: Pipeline: Job
Affects plugin: Reverse Proxy Auth
Affects plugin: SAML Single Sign On(SSO)
Affects plugin: Sidebar Link
Affects plugin: Tag Profiler
Affects plugin: TestComplete support
Affects plugin: TestNG Results
Affects plugin: wso2id-oauth

Jenkins Security Advisory 2023-04-12

Wed, 12 Apr 2023 12:00:00 +0000

Affects plugin: Assembla merge request builder
Affects plugin: Azure Key Vault
Affects plugin: Consul KV Builder
Affects plugin: Delinea Secret Server_Platform
Affects plugin: Fogbugz
Affects plugin: Image Tag Parameter
Affects plugin: Kubernetes
Affects plugin: Lucene-Search
Affects plugin: NeuVector Vulnerability Scanner
Affects plugin: Quay.io trigger
Affects plugin: Report Portal
Affects plugin: Thycotic DevOps Secrets Vault
Affects plugin: TurboScript
Affects plugin: wso2id-oauth

Jenkins Security Advisory 2023-03-21

Tue, 21 Mar 2023 12:00:00 +0000

Affects plugin: AbsInt a³
Affects plugin: Convert To Pipeline
Affects plugin: Cppcheck
Affects plugin: Crap4J
Affects plugin: JaCoCo
Affects plugin: Mashup Portlets
Affects plugin: OctoPerf Load Testing Plugin
Affects plugin: Performance Publisher
Affects plugin: Phabricator Differential
Affects plugin: Pipeline Aggregator View
Affects plugin: remote-jobs-view-plugin
Affects plugin: Role-based Authorization Strategy
Affects plugin: Visual Studio Code Metrics

Jenkins Security Advisory 2023-03-08

Wed, 8 Mar 2023 12:00:00 +0000

Affects Jenkins Core
Affects update-center2

Jenkins Security Advisory 2023-02-15

Wed, 15 Feb 2023 12:00:00 +0000

Affects plugin: Azure Credentials
Affects plugin: Email Extension
Affects plugin: JUnit
Affects plugin: Pipeline: Build Step
Affects plugin: Synopsys Coverity

Jenkins Security Advisory 2023-02-09

Thu, 9 Feb 2023 12:00:00 +0000

Affects Jenkins Docker images

Jenkins Security Advisory 2023-01-24

Tue, 24 Jan 2023 12:00:00 +0000

Affects plugin: BearyChat
Affects plugin: Bitbucket OAuth
Affects plugin: Cisco Spark Notifier
Affects plugin: Gerrit Trigger
Affects plugin: GitHub Pull Request Builder
Affects plugin: GitHub Pull Request Coverage Status
Affects plugin: JIRA Pipeline Steps
Affects plugin: Keycloak Authentication
Affects plugin: Kubernetes Credentials Provider
Affects plugin: Microsoft Entra ID (previously Azure AD)
Affects plugin: MSTest
Affects plugin: OpenID
Affects plugin: OpenId Connect Authentication
Affects plugin: Orka by MacStadium
Affects plugin: PWauth Security Realm
Affects plugin: RabbitMQ Consumer
Affects plugin: Script Security
Affects plugin: Semantic Versioning
Affects plugin: TestComplete support
Affects plugin: TestQuality Updater
Affects plugin: view-cloner
Affects plugin: visualexpert

Jenkins Security Advisory 2022-12-07

Wed, 7 Dec 2022 12:00:00 +0000

Affects plugin: Checkmarx
Affects plugin: Custom Build Properties
Affects plugin: Gitea
Affects plugin: Google Login
Affects plugin: Plot
Affects plugin: Sonar Gerrit
Affects plugin: Spring Config

Jenkins Security Advisory 2022-11-15

Tue, 15 Nov 2022 12:00:00 +0000

Affects plugin: Associated Files
Affects plugin: BART
Affects plugin: CCCC
Affects plugin: CloudBees Docker Hub/Registry Notification
Affects plugin: Cluster Statistics
Affects plugin: Config Rotator
Affects plugin: Delete log
Affects plugin: JAPEX
Affects plugin: JUnit
Affects plugin: loader.io
Affects plugin: Naginator
Affects plugin: NS-ND Integration Performance Publisher
Affects plugin: OSF Builder Suite : : XML Linter
Affects plugin: Pipeline Utility Steps
Affects plugin: Reverse Proxy Auth
Affects plugin: Script Security
Affects plugin: SourceMonitor
Affects plugin: Support Core
Affects plugin: Violations
Affects plugin: XP-Dev

Jenkins Security Advisory 2022-10-19

Wed, 19 Oct 2022 12:00:00 +0000

Affects plugin: BMC AMI DevX Code Debug Code Coverage
Affects plugin: BMC AMI DevX Source Code Download for Endevor, PDS, and Code Pipeline
Affects plugin: BMC AMI DevX Total Test
Affects plugin: BMC AMI Strobe Measurement Task
Affects plugin: Compuware Topaz Utilities
Affects plugin: Contrast Continuous Application Security
Affects plugin: Custom Checkbox Parameter
Affects plugin: 360 FireLine
Affects plugin: Generic Webhook Trigger
Affects plugin: GitLab
Affects plugin: Job Import
Affects plugin: Katalon
Affects plugin: Mercurial
Affects plugin: NeuVector Vulnerability Scanner
Affects plugin: NUnit
Affects plugin: Pipeline: Deprecated Groovy Libraries
Affects plugin: Pipeline: Groovy
Affects plugin: Pipeline: Groovy Libraries
Affects plugin: Pipeline: Input Step
Affects plugin: Pipeline: Stage View
Affects plugin: Pipeline: Supporting APIs
Affects plugin: REPO
Affects plugin: S3 Explorer
Affects plugin: ScreenRecorder
Affects plugin: Script Security
Affects plugin: Tuleap Git Branch Source
Affects plugin: XFramium Builder

Jenkins Security Advisory 2022-09-21

Wed, 21 Sep 2022 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Anchore Container Image Scanner
Affects plugin: Apprenda
Affects plugin: BigPanda Notifier
Affects plugin: BMC AMI Common Configuration
Affects plugin: build-publisher
Affects plugin: CONS3RT
Affects plugin: DotCi
Affects plugin: extreme-feedback
Affects plugin: NS-ND Integration Performance Publisher
Affects plugin: RQM
Affects plugin: Rundeck
Affects plugin: SCM HttpClient
Affects plugin: Security Inspector
Affects plugin: SmallTest
Affects plugin: View26 Test-Reporting
Affects plugin: Walti
Affects plugin: WildFly Deployer
Affects plugin: Worksoft Execution Manager

Jenkins Security Advisory 2022-09-09

Fri, 9 Sep 2022 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2022-08-23

Tue, 23 Aug 2022 12:00:00 +0000

Affects plugin: CollabNet Plugins
Affects plugin: Git
Affects plugin: Job Configuration History
Affects plugin: Kubernetes Continuous Deploy

Jenkins Security Advisory 2022-07-27

Wed, 27 Jul 2022 12:00:00 +0000

Affects plugin: Android Signing
Affects plugin: BMC AMI DevX Code Debug Code Coverage
Affects plugin: BMC AMI DevX Code Pipeline Operations
Affects plugin: BMC AMI DevX Source Code Download for Endevor, PDS, and Code Pipeline
Affects plugin: Buckminster
Affects plugin: CLIF Performance Testing
Affects plugin: Compuware Topaz Utilities
Affects plugin: Compuware zAdviser API
Affects plugin: Coverity
Affects plugin: Deployer Framework
Affects plugin: Dynamic Extended Choice Parameter
Affects plugin: External Monitor Job Type
Affects plugin: Files Found Trigger
Affects plugin: Git
Affects plugin: Git client
Affects plugin: GitHub
Affects plugin: Google Cloud Backup
Affects plugin: HashiCorp Vault
Affects plugin: HTTP Request
Affects plugin: Job Configuration History
Affects plugin: Lucene-Search
Affects plugin: Maven Metadata Plugin for Jenkins CI server
Affects plugin: OpenShift Deployer
Affects plugin: openstack-heat
Affects plugin: Repository Connector
Affects plugin: rhnpush-plugin
Affects plugin: rpmsign-plugin

Jenkins Security Advisory 2022-06-30

Thu, 30 Jun 2022 12:00:00 +0000

Affects plugin: Build Notifications
Affects plugin: build-metrics
Affects plugin: Cisco Spark
Affects plugin: Deployment Dashboard
Affects plugin: Elasticsearch Query
Affects plugin: eXtreme Feedback Panel
Affects plugin: Failed Job Deactivator
Affects plugin: GitLab
Affects plugin: hpe-network-virtualization
Affects plugin: Jigomerge
Affects plugin: Matrix Reloaded
Affects plugin: OpsGenie
Affects plugin: Plot
Affects plugin: Project Inheritance
Affects plugin: Recipe
Affects plugin: Request Rename Or Delete
Affects plugin: requests-plugin
Affects plugin: Rich Text Publisher
Affects plugin: RocketChat Notifier
Affects plugin: RQM
Affects plugin: Skype notifier
Affects plugin: TestNG Results
Affects plugin: Validating Email Parameter
Affects plugin: XebiaLabs XL Release
Affects plugin: XPath Configuration Viewer

Jenkins Security Advisory 2022-06-22

Wed, 22 Jun 2022 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Agent Server Parameter
Affects plugin: Beaker builder
Affects plugin: Convertigo Mobile Platform
Affects plugin: CRX Content Package Deployer
Affects plugin: Date Parameter
Affects plugin: Dynamic Extended Choice Parameter
Affects plugin: EasyQA
Affects plugin: Embeddable Build Status
Affects plugin: Filesystem List Parameter
Affects plugin: Hidden Parameter
Affects plugin: Image Tag Parameter
Affects plugin: Jianliao Notification
Affects plugin: JUnit
Affects plugin: Maven Metadata Plugin for Jenkins CI server
Affects plugin: Nested View
Affects plugin: NS-ND Integration Performance Publisher
Affects plugin: ontrack Jenkins
Affects plugin: Package Version
Affects plugin: Pipeline: Input Step
Affects plugin: Readonly Parameter
Affects plugin: Repository Connector
Affects plugin: REST List Parameter
Affects plugin: Sauce OnDemand
Affects plugin: Squash TM Publisher (Squash4Jenkins)
Affects plugin: Stash Branch Parameter
Affects plugin: ThreadFix
Affects plugin: vRealize Orchestrator
Affects plugin: xUnit

Jenkins Security Advisory 2022-05-17

Tue, 17 May 2022 12:00:00 +0000

Affects plugin: Application Detector
Affects plugin: Autocomplete Parameter
Affects plugin: Blue Ocean
Affects plugin: Git
Affects plugin: GitLab
Affects plugin: Global Variable String Parameter
Affects plugin: JDK Parameter
Affects plugin: Mercurial
Affects plugin: Multiselect parameter
Affects plugin: Pipeline SCM API for Blue Ocean
Affects plugin: Pipeline: Groovy
Affects plugin: Promoted Builds (Simple)
Affects plugin: Random String Parameter
Affects plugin: REPO
Affects plugin: Rundeck
Affects plugin: Script Security
Affects plugin: Selection tasks
Affects plugin: SSH
Affects plugin: Storable Configs
Affects plugin: vboxwrapper
Affects plugin: windows-slaves

Jenkins Security Advisory 2022-04-12

Tue, 12 Apr 2022 12:00:00 +0000

Affects plugin: Credentials
Affects plugin: CVS
Affects plugin: Extended Choice Parameter
Affects plugin: Gerrit Trigger
Affects plugin: Git Parameter
Affects plugin: Google Compute Engine
Affects plugin: Jira
Affects plugin: Job Generator
Affects plugin: Mask Passwords
Affects plugin: Node and Label parameter
Affects plugin: Pipeline: Deprecated Groovy Libraries
Affects plugin: promoted builds
Affects plugin: Publish Over FTP
Affects plugin: Subversion

Jenkins Security Advisory 2022-03-29

Tue, 29 Mar 2022 12:00:00 +0000

Affects plugin: Bitbucket Server Integration
Affects plugin: Continuous Integration with Toad Edge
Affects plugin: Coverage/Complexity Scatter Plot
Affects plugin: Flaky Test Handler
Affects plugin: instant-messaging
Affects plugin: JiraTestResultReporter
Affects plugin: Job and Node ownership
Affects plugin: Pipeline: Phoenix AutoTest
Affects plugin: Proxmox
Affects plugin: RocketChat Notifier
Affects plugin: SiteMonitor
Affects plugin: Tests Selector

Jenkins Security Advisory 2022-03-15

Tue, 15 Mar 2022 12:00:00 +0000

Affects plugin: AWS Credentials
Affects plugin: Dashboard View
Affects plugin: dbCharts
Affects plugin: Environment Dashboard
Affects plugin: Extended Choice Parameter
Affects plugin: Favorite
Affects plugin: Folder-based Authorization Strategy
Affects plugin: GitLab Authentication
Affects plugin: global-build-stats
Affects plugin: incapptic connect uploader
Affects plugin: kubernetes-cd
Affects plugin: List Git Branches Parameter
Affects plugin: Parameterized Trigger
Affects plugin: Release Helper
Affects plugin: Semantic Versioning
Affects plugin: Vmware vRealize CodeStream

Jenkins Security Advisory 2022-02-15

Tue, 15 Feb 2022 12:00:00 +0000

Affects plugin: Agent Server Parameter
Affects plugin: autonomiq
Affects plugin: Checkmarx
Affects plugin: Conjur Secrets
Affects plugin: Convertigo Mobile Platform
Affects plugin: Custom Checkbox Parameter
Affects plugin: dbCharts
Affects plugin: Doktor
Affects plugin: Fortify
Affects plugin: Generic Webhook Trigger
Affects plugin: GitLab Authentication
Affects plugin: HashiCorp Vault
Affects plugin: Pipeline: Build Step
Affects plugin: Pipeline: Deprecated Groovy Libraries
Affects plugin: Pipeline: Groovy
Affects plugin: Pipeline: Multibranch
Affects plugin: Promoted Builds (Simple)
Affects plugin: SCP publisher
Affects plugin: Chef Sinatra
Affects plugin: Snow Commander
Affects plugin: Support Core
Affects plugin: SWAMP
Affects plugin: Team Views

Jenkins Security Advisory 2022-02-09

Wed, 9 Feb 2022 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2022-01-12

Wed, 12 Jan 2022 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Active Directory
Affects plugin: Badge
Affects plugin: batch task
Affects plugin: Bitbucket Branch Source
Affects plugin: Configuration as Code
Affects plugin: Conjur Secrets
Affects plugin: Credentials Binding
Affects plugin: Debian Package Builder
Affects plugin: Docker Commons
Affects plugin: HashiCorp Vault
Affects plugin: Mailer
Affects plugin: Matrix Project
Affects plugin: Metrics
Affects plugin: Publish Over SSH
Affects plugin: SSH Agent
Affects plugin: Warnings

Jenkins Security Advisory 2021-11-12

Fri, 12 Nov 2021 12:00:00 +0000

Affects plugin: Active Choices
Affects plugin: OWASP Dependency-Check
Affects plugin: Performance
Affects plugin: pom2config
Affects plugin: Scriptler
Affects plugin: Squash TM Publisher (Squash4Jenkins)

Jenkins Security Advisory 2021-11-04

Thu, 4 Nov 2021 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Subversion

Jenkins Security Advisory 2021-10-06

Wed, 6 Oct 2021 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Git

Jenkins Security Advisory 2021-08-31

Tue, 31 Aug 2021 12:00:00 +0000

Affects plugin: Code Coverage
Affects plugin: Microsoft Entra ID (previously Azure AD)
Affects plugin: Nested View
Affects plugin: Nomad
Affects plugin: SAML

Jenkins Security Advisory 2021-06-30

Wed, 30 Jun 2021 12:00:00 +0000

Affects Jenkins Core
Affects plugin: CAS
Affects plugin: requests-plugin
Affects plugin: Selenium HTML report

Jenkins Security Advisory 2021-06-18

Fri, 18 Jun 2021 12:00:00 +0000

Affects plugin: Generic Webhook Trigger

Jenkins Security Advisory 2021-06-16

Wed, 16 Jun 2021 12:00:00 +0000

Affects plugin: Scriptler

Jenkins Security Advisory 2021-06-10

Thu, 10 Jun 2021 12:00:00 +0000

Affects plugin: Kiuwan
Affects plugin: Kubernetes CLI
Affects plugin: XebiaLabs XL Deploy

Jenkins Security Advisory 2021-05-25

Tue, 25 May 2021 12:00:00 +0000

Affects plugin: Filesystem Trigger
Affects plugin: Markdown Formatter
Affects plugin: Nuget
Affects plugin: URLTrigger

Jenkins Security Advisory 2021-05-11

Tue, 11 May 2021 12:00:00 +0000

Affects plugin: Credentials
Affects plugin: Dashboard View
Affects plugin: P4
Affects plugin: S3 publisher
Affects plugin: Xcode integration
Affects plugin: Xray - Test Management for Jira

Jenkins Security Advisory 2021-04-21

Wed, 21 Apr 2021 12:00:00 +0000

Affects plugin: CloudBees CD
Affects plugin: Config File Provider
Affects plugin: Templating Engine

Jenkins Security Advisory 2021-04-20

Tue, 20 Apr 2021 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2021-04-07

Wed, 7 Apr 2021 12:00:00 +0000

Affects Jenkins Core
Affects plugin: OpenText Application Automation Tools
Affects plugin: promoted builds

Jenkins Security Advisory 2021-03-30

Tue, 30 Mar 2021 12:00:00 +0000

Affects plugin: Build With Parameters
Affects plugin: Cloud Statistics
Affects plugin: Extra Columns
Affects plugin: Jabber (XMPP) notifier and control
Affects plugin: OWASP Dependency-Track
Affects plugin: REST List Parameter
Affects plugin: Team Foundation Server

Jenkins Security Advisory 2021-03-18

Thu, 18 Mar 2021 12:00:00 +0000

Affects plugin: AWS Credentials
Affects plugin: Libvirt Agents
Affects plugin: Matrix Authorization Strategy
Affects plugin: Role-based Authorization Strategy
Affects plugin: Warnings

Jenkins Security Advisory 2021-02-24

Wed, 24 Feb 2021 12:00:00 +0000

Affects plugin: Active Choices
Affects plugin: Artifact Repository Parameter
Affects plugin: Claim
Affects plugin: Configuration Slicing
Affects plugin: Repository Connector
Affects plugin: Support Core

Jenkins Security Advisory 2021-02-19

Fri, 19 Feb 2021 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2021-01-26

Tue, 26 Jan 2021 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2021-01-13

Wed, 13 Jan 2021 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Bumblebee HP ALM
Affects plugin: TICS
Affects plugin: tracetronic ecu.test

Jenkins Security Advisory 2020-12-03

Thu, 3 Dec 2020 12:00:00 +0000

Affects plugin: Chaos Monkey
Affects plugin: CVS
Affects plugin: Shelve Project
Affects Plugin Installation Manager Tool

Jenkins Security Advisory 2020-11-04

Wed, 4 Nov 2020 12:00:00 +0000

Affects plugin: Active Directory
Affects plugin: Static Analysis Utilities
Affects plugin: Ansible
Affects plugin: AppSpider
Affects plugin: AWS Global Configuration
Affects plugin: Azure Key Vault
Affects plugin: FindBugs
Affects plugin: Kubernetes
Affects plugin: Mail Commander Plugin for Jenkins-ci
Affects plugin: Mercurial
Affects plugin: SQLPlus Script Runner
Affects plugin: Subversion
Affects plugin: Visualworks Store
Affects plugin: VMware Lab Manager Slaves

Jenkins Security Advisory 2020-10-08

Thu, 8 Oct 2020 12:00:00 +0000

Affects plugin: Active Choices
Affects plugin: Audit Trail
Affects plugin: couchdb-statistics
Affects plugin: Maven Cascade Release
Affects plugin: Nerrvana
Affects plugin: Persona
Affects plugin: Release
Affects plugin: Role-based Authorization Strategy
Affects plugin: Shared Objects
Affects plugin: SMS Notification

Jenkins Security Advisory 2020-09-23

Wed, 23 Sep 2020 12:00:00 +0000

Affects plugin: Implied Labels
Affects plugin: Liquibase Runner
Affects plugin: Lockable Resources
Affects plugin: Script Security
Affects plugin: warnings

Jenkins Security Advisory 2020-09-16

Wed, 16 Sep 2020 12:00:00 +0000

Affects plugin: android-lint
Affects plugin: Blue Ocean
Affects plugin: chosen-views-tabbar
Affects plugin: ClearCase Release
Affects plugin: computer-queue-plugin
Affects plugin: Copy data to workspace
Affects plugin: Coverage/Complexity Scatter Plot
Affects plugin: Custom Job Icon
Affects plugin: Description Column
Affects plugin: ElasTest
Affects plugin: Email Extension
Affects plugin: Health Advisor by CloudBees
Affects plugin: Locked Files Report
Affects plugin: Mailer
Affects plugin: MongoDB
Affects plugin: perfecto
Affects plugin: Pipeline Maven Integration
Affects plugin: Radiator View
Affects plugin: Selection tasks
Affects plugin: Storable Configs
Affects plugin: Validating String Parameter

Jenkins Security Advisory 2020-09-01

Tue, 1 Sep 2020 12:00:00 +0000

Affects plugin: Build Failure Analyzer
Affects plugin: Cadence vManager
Affects plugin: Database
Affects plugin: Git Parameter
Affects plugin: JSGames
Affects plugin: Klocwork Analysis
Affects plugin: Parameterized Remote Trigger
Affects plugin: ReadyAPI Functional Testing
Affects plugin: tfs
Affects plugin: Valgrind

Jenkins Security Advisory 2020-08-17

Mon, 17 Aug 2020 12:00:00 +0000

Affects Jenkins Core

Jenkins Security Advisory 2020-08-12

Wed, 12 Aug 2020 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Email Extension
Affects plugin: Flaky Test Handler
Affects plugin: Pipeline Maven Integration
Affects plugin: Yet Another Build Visualizer

Jenkins Security Advisory 2020-07-15

Wed, 15 Jul 2020 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Deployer Framework
Affects plugin: GitLab Authentication
Affects plugin: Matrix Authorization Strategy
Affects plugin: Matrix Project

Jenkins Security Advisory 2020-07-02

Thu, 2 Jul 2020 12:00:00 +0000

Affects plugin: Compatibility Action Storage
Affects plugin: Fortify on Demand
Affects plugin: GitHub Coverage Reporter
Affects plugin: HP ALM Quality Center
Affects plugin: ElasticBox Jenkins Kubernetes CI/CD
Affects plugin: Link Column
Affects plugin: Slack Upload
Affects plugin: Sonargraph Integration
Affects plugin: Stash Branch Parameter
Affects plugin: TestComplete support
Affects plugin: VncRecorder
Affects plugin: VncViewer
Affects plugin: whitesource
Affects plugin: ZAP Pipeline
Affects plugin: Zephyr for JIRA Test Management

Jenkins Security Advisory 2020-06-03

Wed, 3 Jun 2020 12:00:00 +0000

Affects plugin: Compact Columns
Affects plugin: ECharts API
Affects plugin: Play Framework
Affects plugin: Project Inheritance
Affects plugin: Script Security
Affects plugin: Selenium
Affects plugin: Subversion Partial Release Manager
Affects plugin: Swarm

Jenkins Security Advisory 2020-05-06

Wed, 6 May 2020 12:00:00 +0000

Affects plugin: Amazon EC2
Affects plugin: Copy Artifact
Affects plugin: Credentials Binding
Affects plugin: CVS
Affects plugin: SCM Filter Jervis

Jenkins Security Advisory 2020-04-16

Thu, 16 Apr 2020 12:00:00 +0000

Affects plugin: AWS SAM
Affects plugin: Copr
Affects plugin: Parasoft Findings
Affects plugin: Yaml Axis

Jenkins Security Advisory 2020-04-07

Tue, 7 Apr 2020 12:00:00 +0000

Affects plugin: AWSEB Deployment
Affects plugin: Code Coverage
Affects plugin: FitNesse
Affects plugin: Gatling
Affects plugin: useMango Runner

Jenkins Security Advisory 2020-03-25

Wed, 25 Mar 2020 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Artifactory
Affects plugin: Azure Container Service
Affects plugin: OpenShift Pipeline
Affects plugin: Pipeline: AWS Steps
Affects plugin: Queue cleanup
Affects plugin: RapidDeploy

Jenkins Security Advisory 2020-03-09

Mon, 9 Mar 2020 12:00:00 +0000

Affects plugin: Audit Trail
Affects plugin: Backlog
Affects plugin: Cobertura
Affects plugin: CryptoMove
Affects plugin: DeployHub
Affects plugin: Git
Affects plugin: Literate
Affects plugin: Logstash
Affects plugin: Mac
Affects plugin: OpenShift Deployer
Affects plugin: P4
Affects plugin: Quality Gates
Affects plugin: Repository Connector
Affects plugin: Rundeck
Affects plugin: Script Security
Affects plugin: Skytap Cloud CI
Affects plugin: Sonar Quality Gates
Affects plugin: Subversion Release Manager
Affects plugin: Timestamper
Affects plugin: Zephyr Enterprise Test Management
Affects plugin: Zephyr for JIRA Test Management

Jenkins Security Advisory 2020-02-12

Wed, 12 Feb 2020 12:00:00 +0000

Affects plugin: Applatix
Affects plugin: BMC Release Package and Deployment
Affects plugin: brakeman
Affects plugin: debian-package-builder
Affects plugin: DigitalOcean
Affects plugin: Dynamic Extended Choice Parameter
Affects plugin: Eagle Tester
Affects plugin: ECX Copy Data Management
Affects plugin: FitNesse
Affects plugin: Git Parameter
Affects plugin: Google Kubernetes Engine
Affects plugin: Harvest SCM
Affects plugin: Microsoft Entra ID (previously Azure AD)
Affects plugin: NUnit
Affects plugin: Parasoft Environment Manager
Affects plugin: Pipeline GitHub Notify Step
Affects plugin: Pipeline: Groovy
Affects plugin: RadarGun
Affects plugin: S3 publisher
Affects plugin: Script Security
Affects plugin: Subversion

Jenkins Security Advisory 2020-01-29

Wed, 29 Jan 2020 12:00:00 +0000

Affects Jenkins Core
Affects plugin: Code Coverage
Affects plugin: Fortify
Affects plugin: WebSphere Deployer

Jenkins Security Advisory 2020-01-15

Wed, 15 Jan 2020 12:00:00 +0000

Affects plugin: Amazon EC2
Affects plugin: gitlab-hook
Affects plugin: Health Advisor by CloudBees
Affects plugin: Redgate SQL Change Automation
Affects plugin: Robot Framework
Affects plugin: Sounds